name: Security Audit
on:
schedule:
- cron: "0 0 * * *" push:
branches: [master, main]
paths:
- "**/Cargo.toml"
- "**/Cargo.lock"
- ".cargo/audit.toml"
- ".github/workflows/security.yml"
pull_request:
branches: [master, main]
paths:
- "**/Cargo.toml"
- "**/Cargo.lock"
- ".cargo/audit.toml"
- ".github/workflows/security.yml"
permissions:
contents: read
concurrency:
group: security-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
jobs:
audit:
name: Security Audit
runs-on: ubuntu-latest
permissions:
contents: read
issues: write
checks: write
steps:
- uses: actions/checkout@v4
- uses: rustsec/audit-check@v2.0.0
with:
token: ${{ secrets.GITHUB_TOKEN }}
ignore: RUSTSEC-2025-0141